vibo-mcp 1.2.0 → 1.3.0

package/.claude-plugin/marketplace.json

@@ -6,16 +6,16 @@
     "email": "chris.c.hall@gmail.com"
   },
   "metadata": {
-    "description": "MCP server for Vibo (vibodj.com) — plan event music, song requests, and playlists via natural language",
-    "version": "1.2.0"
+    "description": "MCP server for Vibo (vibodj.com) — plan & manage event music, song requests, ideas, guests, and playlists via natural language",
+    "version": "1.3.0"
   },
   "plugins": [
     {
       "name": "vibo-mcp",
       "displayName": "Vibo",
       "source": "./",
-      "description": "MCP server for Vibo — browse events and timelines, add/like song requests, and export to Spotify/Apple Music",
-      "version": "1.2.0",
+      "description": "MCP server for Vibo — browse & manage events, timeline, songs, the DJ song ideas/questions, guests, and exports to Spotify/Apple Music",
+      "version": "1.3.0",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,8 +1,8 @@
 {
   "name": "vibo-mcp",
   "displayName": "Vibo",
-  "version": "1.2.0",
-  "description": "MCP server for Vibo (vibodj.com) — plan event music, song requests, and playlists via natural language",
+  "version": "1.3.0",
+  "description": "MCP server for Vibo (vibodj.com) — plan & manage event music, song requests, ideas, guests, and playlists via natural language",
   "author": {
     "name": "Chris Hall",
     "email": "chris.c.hall@gmail.com"

package/README.md

@@ -33,6 +33,7 @@ Choose one method:
 |--------|----------|------|
 | Email + password (recommended) | `VIBO_EMAIL`, `VIBO_PASSWORD` | You sign in to Vibo with an email/password. |
 | Captured token | `VIBO_ACCESS_TOKEN` (+ `VIBO_REFRESH_TOKEN`) | Your account uses Apple/Google/Facebook sign-in (no password). Capture `x-token`/`x-refresh-token` from a signed-in `web.vibodj.com` session. |
+| Browser capture (SSO) | run `vibo_capture_session` | With the fetchproxy browser extension installed and signed into `web.vibodj.com`, capture the token automatically (saved to `~/.vibo-mcp/session.json`). |
 
 The server boots without credentials; the config error only surfaces on the
 first tool call.

package/SKILL.md

@@ -40,6 +40,10 @@ Pick one:
 - **Captured token (for Apple/Google/Facebook accounts):** set
   `VIBO_ACCESS_TOKEN` (and `VIBO_REFRESH_TOKEN`) with values captured from a
   signed-in `web.vibodj.com` session — no password needed.
+- **Browser capture (SSO, automatic):** with the fetchproxy browser extension
+  installed and yourself signed into https://web.vibodj.com, run
+  `vibo_capture_session` once — it grabs the token from your tab (approve the
+  pair code), saves it to `~/.vibo-mcp/session.json`, and reuses it thereafter.
 
 The server boots without credentials (so it can be installed and probed); the
 config error only appears on the first tool call.
@@ -77,6 +81,7 @@ you get a dry-run preview of exactly what would be sent.
 - `vibo_update_section` — edit a section's name, time, or note.
 - `vibo_answer_question` — answer a planning question (text / option ids / link / image+file uploads).
 - `vibo_set_profile_photo` — set your profile photo from a local image.
+- `vibo_capture_session` — capture your login from a signed-in browser tab (SSO accounts).
 - `vibo_mark_notifications_read`.
 - `vibo_export_event_to_spotify` / `vibo_export_event_to_apple_music`.
 

package/dist/auth.js

@@ -0,0 +1,71 @@
+// SSO browser token auto-capture (fetchproxy bootstrap).
+//
+// Accounts that sign into Vibo only via Apple/Google/Facebook have no password
+// to put in VIBO_PASSWORD. Instead of asking the user to dig the token out of
+// DevTools and paste VIBO_ACCESS_TOKEN, this captures it once from their
+// signed-in web.vibodj.com tab via the fetchproxy browser bridge, then operates
+// from Node thereafter (the bridge touches only the one-time handshake).
+//
+// The Vibo web app stores its tokens as plain localStorage keys `x-token`
+// (access) and `x-refresh-token` on the web.vibodj.com origin (verified live
+// against a signed-in tab). We snapshot those two keys and return them; the caller verifies
+// them (GET_ME) and only then persists via session-store. The client then uses
+// them like any other token pair (with refresh-on-expiry).
+//
+// `@fetchproxy/bootstrap` is imported lazily so the default credential paths
+// never load it — the .mcpb bundle externalizes it, and an eager import would
+// crash the server at load. Tests inject a fake `bootstrap` via `deps`.
+import { McpToolError } from '@chrischall/mcp-utils';
+import { VERSION } from './version.js';
+const SERVER_NAME = 'vibo-mcp';
+/**
+ * Capture the signed-in user's Vibo token pair from their browser via the
+ * fetchproxy bridge and return it (the caller persists after verifying).
+ * Preconditions: the fetchproxy browser
+ * extension is installed and the user is signed into https://web.vibodj.com.
+ */
+export async function captureViboSession(deps = {}) {
+    let bootstrap = deps.bootstrap;
+    if (!bootstrap) {
+        try {
+            const mod = (await import('@fetchproxy/bootstrap'));
+            bootstrap = mod.bootstrap;
+        }
+        catch (err) {
+            throw new McpToolError('Browser token capture is unavailable in this build.', {
+                hint: 'Run vibo-mcp from npm (npx vibo-mcp) — the packaged .mcpb omits @fetchproxy/bootstrap. Or set VIBO_ACCESS_TOKEN instead.',
+                cause: err,
+            });
+        }
+    }
+    let session;
+    try {
+        session = await bootstrap({
+            serverName: SERVER_NAME,
+            version: VERSION,
+            domains: ['vibodj.com'],
+            storageSubdomain: 'web', // tokens live on web.vibodj.com
+            declare: { cookies: [], localStorage: ['x-token', 'x-refresh-token'], sessionStorage: [], captureHeaders: [] },
+            onPairCode: (code) => process.stderr.write(`[vibo-mcp] fetchproxy pair code: ${code}\n`),
+            onWaiting: (hint) => process.stderr.write(`[vibo-mcp] ${hint}\n`),
+        });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new McpToolError(`Vibo browser token capture failed: ${msg}`, {
+            hint: 'Install the fetchproxy browser extension, sign into https://web.vibodj.com, approve the pair code, then retry.',
+            cause: err,
+        });
+    }
+    const accessToken = session.localStorage?.['x-token'];
+    const refreshToken = session.localStorage?.['x-refresh-token'] ?? null;
+    if (!accessToken) {
+        throw new McpToolError('No Vibo token found in the signed-in browser tab.', {
+            hint: 'Make sure you are signed into https://web.vibodj.com in the browser with the fetchproxy extension, then retry.',
+        });
+    }
+    // Return the captured pair WITHOUT persisting — the caller verifies it
+    // (GET_ME) before writing it to disk, so a stale snapshot never lands in
+    // session.json.
+    return { accessToken, refreshToken };
+}

package/dist/bundle.js

@@ -31116,13 +31116,46 @@ function toolAnnotations(opts = {}) {
 }
 
 // src/version.ts
-var VERSION = "1.2.0";
+var VERSION = "1.3.0";
 
 // src/client.ts
-import { dirname, join } from "path";
+import { dirname as dirname2, join as join2 } from "path";
 import { fileURLToPath } from "url";
-var __dirname = dirname(fileURLToPath(import.meta.url));
-await loadDotenvSafely({ path: join(__dirname, "..", ".env"), override: false });
+
+// src/session-store.ts
+import { homedir } from "os";
+import { dirname, join } from "path";
+import { mkdirSync, readFileSync, writeFileSync, existsSync, rmSync, chmodSync } from "fs";
+function sessionFile() {
+  return readEnvVar("VIBO_SESSION_FILE") ?? join(homedir(), ".vibo-mcp", "session.json");
+}
+function loadSession() {
+  try {
+    const file2 = sessionFile();
+    if (!existsSync(file2)) return null;
+    const parsed = JSON.parse(readFileSync(file2, "utf8"));
+    if (parsed && typeof parsed.accessToken === "string" && parsed.accessToken) {
+      return { accessToken: parsed.accessToken, refreshToken: parsed.refreshToken ?? null };
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+function saveSession(session) {
+  const file2 = sessionFile();
+  mkdirSync(dirname(file2), { recursive: true, mode: 448 });
+  writeFileSync(
+    file2,
+    JSON.stringify({ accessToken: session.accessToken, refreshToken: session.refreshToken ?? null }, null, 2),
+    { mode: 384 }
+  );
+  chmodSync(file2, 384);
+}
+
+// src/client.ts
+var __dirname = dirname2(fileURLToPath(import.meta.url));
+await loadDotenvSafely({ path: join2(__dirname, "..", ".env"), override: false });
 var DEFAULT_API_URL = "https://api.vibodj.com/v2/graphql";
 var SERVICE = "Vibo";
 var SIGN_IN_HOST = "https://web.vibodj.com";
@@ -31148,6 +31181,7 @@ var ViboClient = class {
   apiUrl;
   email;
   password;
+  // Not readonly: cleared by setTokens() after a browser capture seeds a session.
   configError;
   accessToken;
   refreshTokenValue;
@@ -31166,18 +31200,41 @@ var ViboClient = class {
     this.accessToken = accessToken ?? null;
     this.refreshTokenValue = refreshToken ?? null;
     const haveLogin = Boolean(email3 && password);
-    const haveToken = Boolean(accessToken);
+    if (!this.accessToken && !haveLogin) {
+      const saved = loadSession();
+      if (saved) {
+        this.accessToken = saved.accessToken;
+        this.refreshTokenValue = saved.refreshToken;
+      }
+    }
+    const haveToken = Boolean(this.accessToken);
     if (!haveLogin && !haveToken) {
       this.configError = new McpToolError(
         "Vibo credentials are not configured.",
         {
-          hint: "Set VIBO_EMAIL and VIBO_PASSWORD (recommended), or paste a captured VIBO_ACCESS_TOKEN (+ VIBO_REFRESH_TOKEN) if your account uses Apple/Google/Facebook sign-in."
+          hint: "Set VIBO_EMAIL and VIBO_PASSWORD (recommended); paste a captured VIBO_ACCESS_TOKEN (+ VIBO_REFRESH_TOKEN); or run vibo_capture_session to grab the token from your signed-in web.vibodj.com browser tab (Apple/Google/Facebook accounts)."
         }
       );
     } else {
       this.configError = null;
     }
   }
+  /**
+   * Adopt a browser-captured token pair (from vibo_capture_session) for
+   * subsequent calls in this process and clear the config error so an account
+   * that started with no credentials becomes usable. Does NOT persist — the
+   * caller persists only after verifying the token authenticates (GET_ME).
+   */
+  setTokens(accessToken, refreshToken) {
+    this.accessToken = accessToken;
+    this.refreshTokenValue = refreshToken;
+    this.configError = null;
+  }
+  /** True when operating purely from a token (no email/password) — refreshed
+   *  tokens should be persisted so they survive a restart. */
+  get tokenOnlyMode() {
+    return !this.email || !this.password;
+  }
   /** Run a GraphQL operation, transparently authenticating + retrying once on token expiry. */
   async gql(query, variables = {}) {
     if (this.configError) throw this.configError;
@@ -31301,6 +31358,9 @@ var ViboClient = class {
             if (data.refreshToken?.accessToken) {
               this.accessToken = data.refreshToken.accessToken;
               this.refreshTokenValue = data.refreshToken.refreshToken;
+              if (this.tokenOnlyMode) {
+                saveSession({ accessToken: this.accessToken, refreshToken: this.refreshTokenValue });
+              }
               return this.accessToken;
             }
           }
@@ -32466,12 +32526,12 @@ function registerCollaborationTools(server) {
   server.registerTool(
     "vibo_list_event_users",
     {
-      description: "List the hosts and guests on an event.",
+      description: "List the hosts and guests on an event. With no usersType, returns both groups merged ({hosts, guests, hostsCount, guestsCount}) and `limit`/`skip` apply per group; with usersType, returns that one group's page.",
       annotations: toolAnnotations({ title: "List Vibo event users", readOnly: true }),
       inputSchema: {
         eventId: external_exports.string().describe("Event id."),
         usersType: external_exports.enum(["host", "guest"]).optional().describe("Filter to only hosts or only guests."),
-        limit: limitSchema,
+        limit: limitSchema.describe("Max items to return (default 20). Applies per group when usersType is omitted."),
         skip: skipSchema
       }
     },
@@ -32616,6 +32676,75 @@ function registerUploadTools(server) {
   );
 }
 
+// src/auth.ts
+var SERVER_NAME = "vibo-mcp";
+async function captureViboSession(deps = {}) {
+  let bootstrap = deps.bootstrap;
+  if (!bootstrap) {
+    try {
+      const mod = await import("@fetchproxy/bootstrap");
+      bootstrap = mod.bootstrap;
+    } catch (err) {
+      throw new McpToolError("Browser token capture is unavailable in this build.", {
+        hint: "Run vibo-mcp from npm (npx vibo-mcp) \u2014 the packaged .mcpb omits @fetchproxy/bootstrap. Or set VIBO_ACCESS_TOKEN instead.",
+        cause: err
+      });
+    }
+  }
+  let session;
+  try {
+    session = await bootstrap({
+      serverName: SERVER_NAME,
+      version: VERSION,
+      domains: ["vibodj.com"],
+      storageSubdomain: "web",
+      // tokens live on web.vibodj.com
+      declare: { cookies: [], localStorage: ["x-token", "x-refresh-token"], sessionStorage: [], captureHeaders: [] },
+      onPairCode: (code) => process.stderr.write(`[vibo-mcp] fetchproxy pair code: ${code}
+`),
+      onWaiting: (hint) => process.stderr.write(`[vibo-mcp] ${hint}
+`)
+    });
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    throw new McpToolError(`Vibo browser token capture failed: ${msg}`, {
+      hint: "Install the fetchproxy browser extension, sign into https://web.vibodj.com, approve the pair code, then retry.",
+      cause: err
+    });
+  }
+  const accessToken = session.localStorage?.["x-token"];
+  const refreshToken = session.localStorage?.["x-refresh-token"] ?? null;
+  if (!accessToken) {
+    throw new McpToolError("No Vibo token found in the signed-in browser tab.", {
+      hint: "Make sure you are signed into https://web.vibodj.com in the browser with the fetchproxy extension, then retry."
+    });
+  }
+  return { accessToken, refreshToken };
+}
+
+// src/tools/session.ts
+function registerSessionTools(server) {
+  server.registerTool(
+    "vibo_capture_session",
+    {
+      description: "Capture your Vibo login from a signed-in web.vibodj.com browser tab via the fetchproxy bridge \u2014 for accounts that sign in with Apple/Google/Facebook (no password). Requires the fetchproxy browser extension installed and you signed into https://web.vibodj.com; approve the pair code shown on first use. The token is saved locally and reused on future calls.",
+      annotations: toolAnnotations({ title: "Capture Vibo session (SSO)", readOnly: false })
+    },
+    async () => {
+      const { accessToken, refreshToken } = await captureViboSession();
+      client.setTokens(accessToken, refreshToken);
+      const data = await client.gql(GET_ME);
+      saveSession({ accessToken, refreshToken });
+      return textResult({
+        captured: true,
+        hasRefreshToken: Boolean(refreshToken),
+        userId: data.me._id,
+        email: data.me.email
+      });
+    }
+  );
+}
+
 // src/index.ts
 await runMcp({
   name: "vibo-mcp",
@@ -32635,6 +32764,7 @@ await runMcp({
     registerImportTools,
     registerCollaborationTools,
     registerSectionEditTools,
-    registerUploadTools
+    registerUploadTools,
+    registerSessionTools
   ]
 });

package/dist/client.js

@@ -1,6 +1,7 @@
 import { dirname, join } from 'path';
 import { fileURLToPath } from 'url';
 import { loadDotenvSafely, readEnvVar, McpToolError, SessionNotAuthenticatedError, truncateErrorMessage, } from '@chrischall/mcp-utils';
+import { loadSession, saveSession } from './session-store.js';
 // Load .env for local dev; silently skip if dotenv is unavailable (e.g. the
 // mcpb bundle, which externalizes dotenv). `override: false` means a
 // host-provided env var always wins over .env.
@@ -50,6 +51,7 @@ export class ViboClient {
     apiUrl;
     email;
     password;
+    // Not readonly: cleared by setTokens() after a browser capture seeds a session.
     configError;
     accessToken;
     refreshTokenValue;
@@ -68,17 +70,45 @@ export class ViboClient {
         this.accessToken = accessToken ?? null;
         this.refreshTokenValue = refreshToken ?? null;
         const haveLogin = Boolean(email && password);
-        const haveToken = Boolean(accessToken);
+        // Fall back to a previously browser-captured session (SSO accounts) ONLY
+        // when there's no env token AND no email/password. Email/password is the
+        // documented preferred path and must win over a (possibly stale) saved
+        // session — otherwise an old session.json would silently shadow it.
+        if (!this.accessToken && !haveLogin) {
+            const saved = loadSession();
+            if (saved) {
+                this.accessToken = saved.accessToken;
+                this.refreshTokenValue = saved.refreshToken;
+            }
+        }
+        const haveToken = Boolean(this.accessToken);
         if (!haveLogin && !haveToken) {
             this.configError = new McpToolError('Vibo credentials are not configured.', {
-                hint: 'Set VIBO_EMAIL and VIBO_PASSWORD (recommended), or paste a captured ' +
-                    'VIBO_ACCESS_TOKEN (+ VIBO_REFRESH_TOKEN) if your account uses Apple/Google/Facebook sign-in.',
+                hint: 'Set VIBO_EMAIL and VIBO_PASSWORD (recommended); paste a captured ' +
+                    'VIBO_ACCESS_TOKEN (+ VIBO_REFRESH_TOKEN); or run vibo_capture_session to grab the ' +
+                    'token from your signed-in web.vibodj.com browser tab (Apple/Google/Facebook accounts).',
             });
         }
         else {
             this.configError = null;
         }
     }
+    /**
+     * Adopt a browser-captured token pair (from vibo_capture_session) for
+     * subsequent calls in this process and clear the config error so an account
+     * that started with no credentials becomes usable. Does NOT persist — the
+     * caller persists only after verifying the token authenticates (GET_ME).
+     */
+    setTokens(accessToken, refreshToken) {
+        this.accessToken = accessToken;
+        this.refreshTokenValue = refreshToken;
+        this.configError = null;
+    }
+    /** True when operating purely from a token (no email/password) — refreshed
+     *  tokens should be persisted so they survive a restart. */
+    get tokenOnlyMode() {
+        return !this.email || !this.password;
+    }
     /** Run a GraphQL operation, transparently authenticating + retrying once on token expiry. */
     async gql(query, variables = {}) {
         if (this.configError)
@@ -205,6 +235,11 @@ export class ViboClient {
                         if (data.refreshToken?.accessToken) {
                             this.accessToken = data.refreshToken.accessToken;
                             this.refreshTokenValue = data.refreshToken.refreshToken;
+                            // Persist the rotated pair so a captured/pasted session survives
+                            // a restart (no email/password to re-login with).
+                            if (this.tokenOnlyMode) {
+                                saveSession({ accessToken: this.accessToken, refreshToken: this.refreshTokenValue });
+                            }
                             return this.accessToken;
                         }
                     }

package/dist/index.js

@@ -15,6 +15,7 @@ import { registerImportTools } from './tools/imports.js';
 import { registerCollaborationTools } from './tools/collaboration.js';
 import { registerSectionEditTools } from './tools/section-edit.js';
 import { registerUploadTools } from './tools/uploads.js';
+import { registerSessionTools } from './tools/session.js';
 // The ViboClient is a module-level singleton (constructed in client.ts and
 // imported by each tool module) that defers its config error to the first
 // request. That preserves the deferred-config-error pattern: the server boots
@@ -39,5 +40,6 @@ await runMcp({
         registerCollaborationTools,
         registerSectionEditTools,
         registerUploadTools,
+        registerSessionTools,
     ],
 });

package/dist/session-store.js

@@ -0,0 +1,45 @@
+import { homedir } from 'os';
+import { dirname, join } from 'path';
+import { mkdirSync, readFileSync, writeFileSync, existsSync, rmSync, chmodSync } from 'fs';
+import { readEnvVar } from '@chrischall/mcp-utils';
+// Where a browser-captured token pair is persisted so it survives MCP restarts.
+// Override with VIBO_SESSION_FILE (used by tests). Written 0600 in a 0700 dir.
+function sessionFile() {
+    return readEnvVar('VIBO_SESSION_FILE') ?? join(homedir(), '.vibo-mcp', 'session.json');
+}
+/** Load a previously-captured session, or null if none / unreadable. */
+export function loadSession() {
+    try {
+        const file = sessionFile();
+        if (!existsSync(file))
+            return null;
+        const parsed = JSON.parse(readFileSync(file, 'utf8'));
+        if (parsed && typeof parsed.accessToken === 'string' && parsed.accessToken) {
+            return { accessToken: parsed.accessToken, refreshToken: parsed.refreshToken ?? null };
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Persist a captured/refreshed token pair (0600 file in a 0700 dir). */
+export function saveSession(session) {
+    const file = sessionFile();
+    mkdirSync(dirname(file), { recursive: true, mode: 0o700 });
+    writeFileSync(file, JSON.stringify({ accessToken: session.accessToken, refreshToken: session.refreshToken ?? null }, null, 2), { mode: 0o600 });
+    // `mode` in writeFileSync only applies when the file is *created*; enforce
+    // 0600 on overwrite too (a pre-existing file keeps its old, possibly looser perms).
+    chmodSync(file, 0o600);
+}
+/** Remove any persisted session. */
+export function clearSession() {
+    try {
+        const file = sessionFile();
+        if (existsSync(file))
+            rmSync(file);
+    }
+    catch {
+        // best-effort
+    }
+}

package/dist/tools/collaboration.js

@@ -5,12 +5,12 @@ import { LIST_EVENT_USERS, INVITE_USERS, CHANGE_USER_ROLE, REMOVE_USER } from '.
 import { limitSchema, skipSchema, pagination, previewResult } from './shared.js';
 export function registerCollaborationTools(server) {
     server.registerTool('vibo_list_event_users', {
-        description: 'List the hosts and guests on an event.',
+        description: "List the hosts and guests on an event. With no usersType, returns both groups merged ({hosts, guests, hostsCount, guestsCount}) and `limit`/`skip` apply per group; with usersType, returns that one group's page.",
         annotations: toolAnnotations({ title: 'List Vibo event users', readOnly: true }),
         inputSchema: {
             eventId: z.string().describe('Event id.'),
             usersType: z.enum(['host', 'guest']).optional().describe('Filter to only hosts or only guests.'),
-            limit: limitSchema,
+            limit: limitSchema.describe('Max items to return (default 20). Applies per group when usersType is omitted.'),
             skip: skipSchema,
         },
     }, async ({ eventId, usersType, limit, skip }) => {

package/dist/tools/session.js

@@ -0,0 +1,24 @@
+import { textResult, toolAnnotations } from '@chrischall/mcp-utils';
+import { client } from '../client.js';
+import { captureViboSession } from '../auth.js';
+import { saveSession } from '../session-store.js';
+import { GET_ME } from '../gql.js';
+export function registerSessionTools(server) {
+    server.registerTool('vibo_capture_session', {
+        description: "Capture your Vibo login from a signed-in web.vibodj.com browser tab via the fetchproxy bridge — for accounts that sign in with Apple/Google/Facebook (no password). Requires the fetchproxy browser extension installed and you signed into https://web.vibodj.com; approve the pair code shown on first use. The token is saved locally and reused on future calls.",
+        annotations: toolAnnotations({ title: 'Capture Vibo session (SSO)', readOnly: false }),
+    }, async () => {
+        const { accessToken, refreshToken } = await captureViboSession();
+        client.setTokens(accessToken, refreshToken);
+        // Confirm the captured token actually authenticates BEFORE persisting it,
+        // so a stale snapshot never lands in session.json.
+        const data = await client.gql(GET_ME);
+        saveSession({ accessToken, refreshToken });
+        return textResult({
+            captured: true,
+            hasRefreshToken: Boolean(refreshToken),
+            userId: data.me._id,
+            email: data.me.email,
+        });
+    });
+}

package/dist/version.js

@@ -2,4 +2,4 @@
 // literal on the line carrying the release marker; every manifest and the MCP
 // server banner import VERSION from here, so there is exactly one place to keep
 // in sync (and one release-please extra-files entry).
-export const VERSION = '1.2.0'; // x-release-please-version
+export const VERSION = '1.3.0'; // x-release-please-version

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "vibo-mcp",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "mcpName": "io.github.chrischall/vibo-mcp",
-  "description": "Vibo (vibodj.com) MCP server for Claude — host/couple event music planning. Developed and maintained by AI (Claude Code).",
+  "description": "Vibo (vibodj.com) MCP server for Claude — host/couple event music planning & management. Developed and maintained by AI (Claude Code).",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",
   "repository": {
     "type": "git",
@@ -37,7 +37,7 @@
   ],
   "scripts": {
     "build": "tsc && npm run bundle",
-    "bundle": "esbuild src/index.ts --bundle --platform=node --format=esm --external:dotenv --outfile=dist/bundle.js",
+    "bundle": "esbuild src/index.ts --bundle --platform=node --format=esm --external:dotenv --external:@fetchproxy/bootstrap --outfile=dist/bundle.js",
     "dev": "node dist/index.js",
     "test": "vitest run",
     "test:watch": "vitest",
@@ -45,6 +45,7 @@
   },
   "dependencies": {
     "@chrischall/mcp-utils": "^0.10.4",
+    "@fetchproxy/bootstrap": "^1.3.4",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "dotenv": "^17.4.0",
     "zod": "^4.4.2"

package/server.json

@@ -1,17 +1,17 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.chrischall/vibo-mcp",
-  "description": "Vibo (vibodj.com) MCP — plan event music: events, timeline, song requests, playlist export",
+  "description": "Vibo (vibodj.com) MCP — plan & manage event music: timeline, songs, ideas, questions, guests",
   "repository": {
     "url": "https://github.com/chrischall/vibo-mcp",
     "source": "github"
   },
-  "version": "1.2.0",
+  "version": "1.3.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "vibo-mcp",
-      "version": "1.2.0",
+      "version": "1.3.0",
       "transport": {
         "type": "stdio"
       },